Changelog

Every API release since v2.0.0, newest first. Breaking changes are flagged in red — we give at least 90 days' notice on those, usually more. Subscribe to the feed or watch the announcements tag on the community forum.

v2.3.128 January 2026
v2.3.014 November 2025
v2.2.120 June 2025
v2.2.03 June 2025
Breaking change: webhook signatures moved from a single unversioned HMAC to the versioned scheme t=<unix_ts>,v1=<hex>. The old X-TPA-Signature-Legacy header kept working until 1 September 2025 and is now gone. If your verifier still reads the old header, you're silently accepting unsigned payloads — check that first.
v2.1.12 October 2024
v2.1.019 September 2024
v2.0.26 May 2024
v2.0.118 March 2024
v2.0.05 March 2024
Breaking change: v1 endpoints stopped answering on 1 October 2024. The v1 → v2 migration mostly amounts to changing the base URL and renaming result to state in verification responses. The migration guide stayed pinned on the forum for a year; it's now folded into the API reference.

Older v1-era releases are archived on the forum. For how the API behaves today, read the reference; for whether it's behaving today, check status.